Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Ekmar Turizm Ticaret A.Ş. (“we”, “us”, “our”) collects, uses, protects, and manages your personal data and uses cookies on ekmaryachting.com.

Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR), Ekmar Turizm Ticaret A.Ş. acts as the Data Controller.

PART I — PRIVACY POLICY

1. Data We Collect

  • Contact & Inquiry Details: Name, email address, phone number, preferred travel dates, guest counts, and personal messages or charter preferences submitted via our inquiry forms.
  • Technical & Usage Data: IP address, browser type, device information, operating system, and basic site navigation/analytics metrics collected automatically.

2. Purpose and Legal Basis for Data Processing

We process your personal data under the following legal bases pursuant to Article 5 of the KVKK and Article 6 of the GDPR:

  • Contract Performance: To process inquiries, prepare customized yacht charter proposals, and execute charter agreements at your request.
  • Legitimate Interests: To optimize site performance, maintain system security, and enhance customer service quality without infringing on your fundamental rights.
  • Legal Obligation: To comply with statutory accounting, tax, and maritime regulations in the Republic of Türkiye.

We never sell, rent, or trade your personal data to third parties.

3. Data Sharing and Cross-Border Transfers

  • Operational Sharing: Necessary booking details may be shared strictly with yacht owners, captains, or vessel operators as required to fulfill your charter agreement.
  • Service Providers: We engage trusted infrastructure partners (such as secure hosting, Cloudflare CDN/security, and communication systems) who process data on our behalf under strict confidentiality agreements.
  • Cross-Border Transfers: Where personal data is transferred across international borders (e.g., for cross-border itineraries in Greek waters or via global cloud service providers), such transfers are conducted in full compliance with KVKK transfer rules (Article 9) and GDPR safeguards to ensure data security.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the operational charter purposes outlined above or as mandated by statutory Turkish commercial, tax, and maritime retention periods. Once the retention period expires, your data is securely purged, destroyed, or anonymized.

5. Your Rights (Under KVKK & GDPR)

As a data subject, you hold statutory rights under Article 11 of the KVKK and Articles 15–22 of the GDPR. You have the right to:

  • Request confirmation as to whether your personal data is being processed.
  • Access your personal data and request copies of processed records.
  • Request correction of inaccurate, incomplete, or outdated data.
  • Request deletion, erasure, or anonymization of your personal data.
  • Object to processing based on legitimate interests or automated decision-making.
  • Request restriction of data processing under applicable statutory conditions.

To exercise any of these rights or submit a data access request, please contact our Data Controller team using the details provided in Part III.

6. Data Security

Our website is served over secure HTTPS encryption (SSL/TLS) and protected by industry-standard technical and organizational security measures. While we implement robust security controls to safeguard your information, no transmission over the internet can be guaranteed as 100% secure.

PART II — COOKIE POLICY

7. What Are Cookies?

Cookies are small text files stored on your device when you browse a website. They enable core site functionality, enhance site navigation, remember user preferences, and help us analyze site performance.

8. Categories of Cookies We Use

  • Essential / Strictly Necessary Cookies: Mandatory for fundamental website operations, including navigation, contact form submissions, CSRF protection, and session management. These cannot be disabled.
  • Security Cookies: Deployed by security infrastructure (such as Cloudflare) to distinguish genuine human visitors from automated bot threats.
  • Performance & Analytics Cookies: Used to collect aggregated, anonymized metrics regarding website traffic and user interaction to help us improve our platform. *(Consent required via cookie banner)*.

9. Managing & Disabling Cookies

Where required by applicable laws (such as the EU ePrivacy Directive and GDPR), non-essential analytics cookies will only be placed on your device with your prior consent obtained via our cookie consent banner. You can withdraw or adjust your cookie preferences at any time through the banner or via your web browser settings.

PART III — CONTACT & DATA CONTROLLER INQUIRIES

If you have questions regarding this Privacy & Cookie Policy or wish to exercise your KVKK/GDPR rights, please contact our Data Protection Representative:

Legal Entity (Data Controller): Ekmar Turizm Ticaret A.Ş.

Address: Kemeraltı Mah. Yeni Datça Yolu No 21E, 48700 Marmaris / Muğla, Türkiye